VNCR parameters in listener.ora automatically updated by oraagent

To address TNS Listener Remote Poisoning as per CVE-2012-1675, I am trying to implement VNCR in Oracle Clusterware 12.2.0.1.0. The following cluster version is currently running in our test environment (it is a cold failover between 2 nodes): [oracle@tstdb05 admin]$ crsctl query crs activeversion -f Oracle Clusterware active version on the cluster is [12.2.0.1.0]. The cluster upgrade state is [NORMAL]. The cluster active patch level is [0]. [oracle@tstdb05 admin]$ srvctl -version srvctl version: 12.2.0.1.0 Please NOTE that 12.2.0.1.0 was upgraded from 11.2.0.4. Currently, my listener.ora is updated by oraagent automatically as follows: [oracle@tstdb05 admin]$ more listener.ora ################### MGMTLSNR=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=MGMTLSNR)))) # line added by Agent